Same Category Posts

Same Category Posts has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Same Category Posts has a vendor fix available, so running the current release closes it.

All of these findings were reported by Athiwat Tiprasaharn (Jitlada). Same Category Posts is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Same Category Posts vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4CVE-2025-14797

Same Category Posts <= 1.1.19 - Authenticated (Author+) Stored Cross-Site Scripting via Widget Title Placeholder

Read the full analysis

Vulnerability Records

1 records
Same Category Posts banner
Latestv1.2.0

Same Category Posts

Daniel Floeter

Author

Daniel Floeter

4.7(13)
94/100
Last Updated
2026-09-02 (11d ago)
Active Installs
3,000+
Downloads
75,276
Requires WP
6.3+
Requires PHP
7.2+
Tested up to
WP 7.1
Created
2015-09-27 (11y ago)

Same Category Posts shows a list of related posts with a same Post Type to the current post. It comes as a classic widget and as a block, both with the same options and the same output. The list is only shown on single post pages and on archive pages. Forked from Related Posts Widget. Tip Top Press We’re Tip Top Press and create widgets for WordPress. If you want to know about what we’re working on and you are interested in backgrounds then you can read all newes storys on our blog. Features Shows a list of related posts. Option which Post Type should be related to the current post. Custom Post Types support. Child category and terms support. Archive page support. Option exclude one or multi categories or terms. Option to filter by popular posts (by comment count). Option separate categories if more than one is assigned. Set how many posts to show (overall and by category). Option exclude current post, sticky posts or children. Option exclude categories and terms without exclude their children. Placeholders in title string (e.g. “There are a lot of %cat%-News.” -> “There are a lot of Tech-News.”). Filter hook for the post titles &#8216;widget_title’. Option to show post thumbnail and set width & height. Option to crop thumbnails dimensions with CSS. Option to put thumbnail on top. Option to make the widget title link to the category page. Option to show/hide the title. Option to show the post excerpt and how long (in words). Option change excerpt &#8216;more’ text. Option to show the post date, author and comment count. Block with the same options as the widget, with a live preview in the editor. Placeholder In text boxes %cat% will replaced with the (first assigned) category name, e.g. “There are a lot of %cat%-News.” -> “There are a lot of Tech-News.” And %cat-all% will replaced with all assigned category name, e.g. “Special offers for %cat-all%!” -> “Special offers for houses, flats, apartments.” Contribute While using this plugin if you find any bug or any conflict, please submit an issue at Github (If possible with a pull request).

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C